Metasploit-Plugins

A collection of Metasploit plugins I have written for various reasons. To use, simply download the plugin of your choice into your Metasploit's plugins folder (typically /usr/share/metasploit-framework/plugins/) and run load $plugin e.g. load stats.

Overview

stats.rb

This plugin simply provides a few commands for displaying stats about the current workspace such as most popular ports, total hosts/services, etc.

msf6 > load stats
[*] Successfully loaded plugin: stats
msf6 > count_all
8 total hosts (8 alive)
43 total services (32 open)
msf6 > count_hosts
8 total hosts (8 alive)
msf6 > count_services
43 total services (32 open)
msf6 > top_ports
Top 10 open ports:
Rank  | Port  | Count | Module?
--------------------------------
#1    | 80    | 8     | Yes
#2    | 443   | 5     | Yes
#3    | 22    | 3     | Yes
#4    | 53    | 2     | Yes
#5    | 25    | 2     | Yes
#6    | 21    | 2     | Yes
#7    | 7326  | 1     | No
#8    | 7000  | 1     | Yes
#9    | 5978  | 1     | No
#10   | 2022  | 1     | Yes
msf6 > top_ports 5
Top 5 open ports:
Rank  | Port  | Count | Module?
--------------------------------
#1    | 80    | 8     | Yes
#2    | 443   | 5     | Yes
#3    | 22    | 3     | Yes
#4    | 53    | 2     | Yes
#5    | 25    | 2     | Yes
msf6 >

powersploit_portscan_db_import.rb

This plugin provides the powersploit_portscan_db_import <filename.xml> command to import host and service info from XML files generated by the PowerSploit Invoke-Portscan utility. This is useful in cases where you are on a Windows machine and cannot run nmap due to an EDR, for example. By default this plugin will only import hosts which are up, and ports which are open. There are comments in the source for how to change this do import all hosts and ports (down hosts and closed/filtered ports alike) if desired.

msf6 > load powersploit_portscan_db_import
[*] Successfully loaded plugin: PowerSploit Portscan DB Import
msf6 > powersploit_portscan_db_import 8.8.8.8.xml
[*] Processing /home/tactifail/8.8.8.8.xml
[*] Importing 8.8.8.8
msf6 > powersploit_portscan_db_import scans/*.xml
[*] Processing /home/tactifail/scans/1.2.3.0_24.xml
[*] Importing 1.2.3.1
[*] Importing 1.2.3.2
[*] Importing 1.2.3.3
[*] Importing 1.2.3.4
[*] Processing /home/tactifail/scans/10.0.0.0_8.xml
[*] Importing 10.0.100.1
[*] Importing 10.0.100.2
[*] Importing 10.0.100.3
[*] Importing 10.0.100.5
[*] Importing 10.0.100.8
[*] Importing 10.0.100.13
[*] Importing 10.0.100.21
[*] Importing 10.0.100.34
[*] Importing 10.0.100.55
[*] Importing 10.0.100.89
...